here are the error messages that I get...

First error message -->  "Windows file protection could not initiate 
a scan
of protected system files."

I also get this error --> "specifc error code is 0x000006ba  [The RPC
server is unavailable]"

thanks..


--- In [email protected], "N. Thomas" <[EMAIL PROTECTED]> 
wrote:
> 
> system32.exe is part of a virus.  It must have registered itself 
with SFC.
> Check the C:\WINNT\SYSTEM32\DLLCACHE folder (superhidden) for 
another
> copy of it and delete it.
> Make sure your SHELL key has been corrected in
> HKLM\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon\Shell
> it should point to C:\WINNT\EXPLORER.EXE.
> 
> To run SFC you have to be in Normal Mode.  Run sfc by using this
> switch: "sfc /scannow" otherwise SFC will just quit.
> If you're still having OS related difficulties, try reinstalling
> Service Pack 4.  O
> therwise, since the virus can't infect system files it can only add 
in
> files, you should be okay and don't need to use SFC.
> 
> 
> --- In [email protected], "Etop Udoh" 
<[EMAIL PROTECTED]>
> wrote:
> > 
> > 
> >  I got the virus Hidrag.A on one of my Win2k machines, and ended 
up 
> > watching quite a few "system files" get deleted to rid of the 
virus.
> > 
> >  My problem is the I can get "SFC" to run.   It keeps giving me 
some 
> > error about windows protection.
> > 
> >  what is the correct procedure in running "SFC" ?
> >  how do I run "SFC" ?    Normal Mode ?   Safe Mode ?
> > 
> >  Any ideas how to get "SFC" to run ?
> > 
> >  I also get an error message saying that the "system32.exe" file 
in
> > the windows directory is missing.
> > 
> > any ideas ?
> > 
> > 
> >  Thanks..
> > 

--
====================================================================
|  Etop Udoh   | Http://www.geocities.com/sdruid11                 |
| P.O. Box 1054| Http://www.angelfire.com/ga3/sdruid               |
|Snellville, Ga| Http://home.bellsouth.net/p/pwp-sdruid            |
|    30078     | Http://www.geocities.com/siliconvalley/bit/9122   |
|--------------| Http://home.earthlink.net/~sdruid11               |
|          A+ Certified                           Net+ Certified   |
|                      \/                      \/                  |
|[EMAIL PROTECTED] |[EMAIL PROTECTED] |[EMAIL PROTECTED]|
| !!        ..........Peace and Love to All.........          !!   |
====================================================================







If you have any questions or problems with any aspect of this site, please feel 
free to contact me directly [EMAIL PROTECTED] Please do not post personal 
issues directly to the group.

To unsubscribe from this list, send an email to [EMAIL PROTECTED]

Thank you for using A-1 Computer Tech 
Yahoo! Groups Links

<*> To visit your group on the web, go to:
    http://groups.yahoo.com/group/A-1-Computer_Tech/

<*> To unsubscribe from this group, send an email to:
    [EMAIL PROTECTED]

<*> Your use of Yahoo! Groups is subject to:
    http://docs.yahoo.com/info/terms/
 



Reply via email to